doccano (>=1.8.2, <=1.8.3), emus-web (0.1.0) +6 more potentially affected by CVE-2026-27982 via django-allauth (0.50.0)

django-allauth PYPI version 0.50.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - doccano =1.8.2, =1.0.0b6, =1.40.0, =1.92.0, =0.1.6, =0.1.0, =0.11.12 Source cves: CVE-2026-27982 Source advisory:...

aleksis-core (>=3.0.0b0, <=3.0.0b2), doccano (>=1.8.4, <=1.8.5) +3 more potentially affected by CVE-2026-27982 via django-allauth (0.52.0)

django-allauth PYPI version 0.52.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - aleksis-core =3.0.0b0, =1.8.4, =1.8.4.1, =3.11.8, =1.9.0, =1.10.2 Source cves: CVE-2026-27982 Source advisory: OSV:GHSA-2JPR-83RG-V...

doccano (>=1.8.2, <=1.8.3), emus-web (0.1.0) +6 more potentially affected by CVE-2026-27982 via django-allauth (0.50.0)

django-allauth PYPI version 0.50.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - doccano =1.8.2, =1.0.0b6, =1.40.0, =1.92.0, =0.1.6, =0.1.0, =0.11.12 Source cves: CVE-2026-27982 Source advisory: OSV:PYSEC-2026-56...

doccano (>=1.8.2, <=1.8.3), emus-web (0.1.0) +6 more potentially affected by CVE-2025-65430 via django-allauth (0.50.0)

django-allauth PYPI version 0.50.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - doccano =1.8.2, =1.0.0b6, =1.40.0, =1.92.0, =0.1.6, =0.1.0, =0.11.12 Source cves: CVE-2025-65430 Source advisory:...

aleksis-core (>=3.0.0b0, <=3.0.0b2), doccano (>=1.8.4, <=1.8.5) +3 more potentially affected by CVE-2025-65431 via django-allauth (0.52.0)

django-allauth PYPI version 0.52.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - aleksis-core =3.0.0b0, =1.8.4, =1.8.4.1, =3.11.8, =1.9.0, =1.10.2 Source cves: CVE-2025-65431 Source advisory: OSV:GHSA-8M3C-C723-H...

aleksis-core (>=3.0.0b0, <=3.0.0b2), doccano (>=1.8.4, <=1.8.5) +3 more potentially affected by CVE-2025-65430 via django-allauth (0.52.0)

django-allauth PYPI version 0.52.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - aleksis-core =3.0.0b0, =1.8.4, =1.8.4.1, =3.11.8, =1.9.0, =1.10.2 Source cves: CVE-2025-65430 Source advisory: OSV:GHSA-QHMC-3MVR-F...

doccano (>=1.8.2, <=1.8.3), emus-web (0.1.0) +6 more potentially affected by CVE-2025-65431 via django-allauth (0.50.0)

django-allauth PYPI version 0.50.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - doccano =1.8.2, =1.0.0b6, =1.40.0, =1.92.0, =0.1.6, =0.1.0, =0.11.12 Source cves: CVE-2025-65431 Source advisory:...

aleksis-core (>=3.0.0b0, <=3.0.0b2), doccano (>=1.8.4, <=1.8.5) +3 more potentially affected by CVE-2025-65431 via django-allauth (0.52.0)

django-allauth PYPI version 0.52.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - aleksis-core =3.0.0b0, =1.8.4, =1.8.4.1, =3.11.8, =1.9.0, =1.10.2 Source cves: CVE-2025-65431 Source advisory: OSV:PYSEC-2025-111...

CVE-2024-40442

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via a crafted REST Request...

CVE-2024-40441

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via the modelattribs parameter...

CVE-2024-40441

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via the modelattribs parameter...

CVE-2024-40442

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via a crafted REST Request...

CVE-2024-40442

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via a crafted REST Request...

CVE-2024-40441

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via the modelattribs parameter...

CVE-2024-40442

The Doccano open-source annotation tools (v.1.8.4) and the Doccano Auto Labeling Pipeline module (v.0.1.23) are vulnerable to a privilege escalation flaw. The root cause is the improper validation of REST requests , which allows a remote attacker to escalate privileges using a crafted request. Th...

CVE-2024-40442

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via a crafted REST Request...

PT-2024-28848 · Doccano · Doccano

Name of the Vulnerable Software and Affected Versions: Doccano Open source annotation tools for machine learning practitioners version 1.8.4 Doccano Auto Labeling Pipeline module to annotate a document automatically version 0.1.23 Description: The issue allows a remote attacker to escalate...

CVE-2024-40442: Improper Control of Generation of Code

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via a crafted REST Request...

CVE-2024-40441: Server-Side Request Forgery (SSRF)

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via the modelattribs parameter...

Doccano security vulnerabilities

doccano is an open source human text annotation tool from doccano open source. A security vulnerability exists in Doccano v1.8.4 and earlier versions. A remote attacker exploited the vulnerability to elevate privileges via the modelattribs parameter...